Help Center/ MapReduce Service/ Component Operation Guide (LTS)/ Using Kafka/ Kafka User Permission Management/ Creating a Kafka Role
Updated on 2024-10-09 GMT+08:00
View PDF
Share

Creating a Kafka Role

Scenario

Create and configure a Kafka role as an MRS cluster administrator.

This section applies to MRS 3.x or later.

  • The Kafka role can be created for clusters in security mode, but not for clusters in common mode.
  • If the current component uses Ranger for permission control, you need to configure permission management policies based on Ranger. For details, see Adding a Ranger Access Permission Policy for Kafka.

Procedure

  1. Log in to FusionInsight Manager and choose System > Permission > Role.
  2. On the displayed page, click Create Role and enter a Role Name and Description.
  3. On the Configure Resource Permission page, choose Name of the desired cluster > Kafka.
  4. Select permissions based on service requirements. For details about configuration items, see Table 1.

    Table 1 Description

    Scenario

    Role Authorization

    Setting the Kafka administrator permissions

    In the Configure Resource Permission table, choose Name of the desired cluster > Kafka > Kafka Manager Privileges.

    NOTE:

    This permission allows you to create and delete topics, but does not allow you to produce or consume any topics.

    Setting the production permission of a user on a topic
    1. In the Configure Resource Permission table, choose Name of the desired cluster > Kafka > Kafka Topic Producer And Consumer Privileges.
    2. In the Permission column of the specified topic, select Kafka Producer Permission.

    Setting the consumption permission of a user on a topic
    1. In the Configure Resource Permission table, choose Name of the desired cluster > Kafka > Kafka Topic Producer And Consumer Privileges.
    2. In the Permission column of the specified topic, select Kafka Consumer Privileges.

  5. Click OK, and return to the Role page.